3460 matches found
CVE-2008-3883
configvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/roken.pike temporary file...
CVE-2008-3883
configvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/roken.pike temporary file...
CVE-2008-3294
src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it...
Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
Summary Product : Vim -- Vi IMproved Versions : 5.0--current, possibly older; 4.6 and 3.0 not vulnerable Impact : Arbitrary code execution Wherefrom: Local Original : http://www.rdancer.org/vulnerablevim-configure.in.html http://www.rdancer.org/vulnerablevim-configure.in.patch Insecure temporary...
BitchX: Multiple vulnerabilities
Background BitchX is an IRC client. Description bannedit reported a boundary error when handling overly long IRC MODE messages CVE-2007-4584. Nico Golde reported an insecure creation of a temporary file within the ehostname function CVE-2007-5839. Impact A remote attacker could entice a user to...
CVE-2007-5495
sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file...
skk Arbitrary Code Execution Vulnerability
Overview skk Simple Kana to Kanji conversion software would create an insecure temporary file without taking proper security precautions. Impact An local attacker could overwrite arbitrary files. Solution Please refer to the 'Vendor Information' section for official remediation and take appropria...
DEBIAN-CVE-2008-2266
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...
xen xenmon.py / xenbaked insecure temporary file accesss
1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...
CVE-2008-1103
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...
CVE-2008-1103
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...
Input validation
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...
CVE-2008-1103
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...
DEBIAN-CVE-2008-1103
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...
CVE-2008-1103
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...
CVE-2008-1103
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...
CVE-2008-1103
The CVE-2008-1103 entry concerns Blender's undo save quit routine. Affected software: Blender 2.5, 2.63a, and earlier. Root cause: a symlink attack on the quit.blend temporary file enables a local attacker to overwrite arbitrary files. Impact: ambiguity in the description, but the documented effe...
GNU Emacs创建不安全临时文件漏洞
BUGTRAQ ID: 28857 CVECAN ID: CVE-2008-1694 Emacs是一个可扩展的实时显示编辑器。 Emacs的vcdiff工具（lib-src/vcdiff）以不安全的方式使用临时文件，这允许本地攻击者通过符号链接攻击以运行vcdiff用户的权限写入任意文件。 GNU Emacs 20.7 - 22.1.50 GNU --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lib-src/vcdiff?view=log...
GLSA-200804-11 : policyd-weight: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200804-11 policyd-weight: Insecure temporary file creation Chris Howells reported that policyd-weight creates and uses the '/tmp/.policyd-weight/' directory in an insecure manner. Impact : A local attacker could exploit this...
GLSA-200804-09 : am-utils: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200804-09 am-utils: Insecure temporary file creation Tavis Ormandy discovered that, when creating temporary files, the 'expn' utility does not check whether the file already exists. Impact : A local attacker could exploit the...